You can return to the original look by selecting English in the language selector
above.

IAM Policy Examples for Secrets in AWS Secrets Manager

During setup, you create an IAM policy that you assign to AWS Elemental MediaConnect. This policy
allows AWS Elemental MediaConnect to read secrets that you have stored in AWS Secrets
Manager. The settings for this policy are entirely up to you. The policy can range
from
most restrictive (allowing access to only specific secrets) to least restrictive (allowing
access to any secret that you create using this AWS
account). We recommend using the most restrictive policy as a best practice. However,
the examples in this section show you how to set up policies
with different levels of restriction. Because AWS Elemental MediaConnect needs only
read access to secrets, all the examples in this section show only the actions
necessary to read the values that you store.

Allow Read Access to All Secrets Created in a Specific Region in AWS Secrets Manager

The following IAM policy allows read access to all secrets that you create in a specific
AWS Region in AWS Secrets Manager. This policy applies to
resources that you have created already and all resources that you create in the future
in the specified Region.

Allow Read Access to All Resources in AWS Secrets Manager

The following IAM policy allows read access to all resources that you create in AWS
Secrets Manager. This policy applies to resources that you have
created already and all resources that you create in the future.